Habitat Host File Manager

Detailed descriptions and imagery explaining each tool available inside Habitat. Feel free to post feature requests under each tools forum post if you would like to see something added or changed in the tools.
Post Reply
User avatar
Cubert
Posts: 2430
Joined: Tue Dec 29, 2015 7:57 pm
8
Contact:

Habitat Host File Manager

Post by Cubert »

The host file manager tool is available at the Client and Agent levels. This tool allows you to import, modify and deploy Host, LMHost, Networks, Protocol and Services files stored on agents at %windir%\system32\drivers\etc\

Fetch File Button
You can use the Fetch file tool without modifying any agents files. The Fetch Files function only captures the files from an agent as they currently are. It does not make any changes to that agent. The results are displayed in the different file tabs in plugin. You can review the file and make changes, then when saved will push changes back to agent.



Client View


GhostFileClientConsole.png
GhostFileClientConsole.png (70.65 KiB) Viewed 4961 times

Allows you to construct or fetch and save Windows networking files as a clients default then using the Enable File Monitor you can monitor the agents under that client for differing files, files that do not match the client default..

Export To Agents
This control pushes a copy of the Clients Default Files to the agents table so that the agent default will be the same as the client default. This is used when Enabling File monitoring so that the agents can get a copy of a client default is needed. You can modify and save the agent files at the agent console and the monitor will test against the modified files.

Agent View

GhostFileAgentConsole.png
GhostFileAgentConsole.png (80.94 KiB) Viewed 4961 times

Allows you to grab the current files, modify them and save them back to agent along with Automate database.



Enable File Monitor

This is an automated service that tests the agents under a client for network files that differ from the agents defaults. To allow this service to operate you will need to enable this service in the Automate Tasks inside Habitat. If an agent is found in noncompliance a warning alarm is set for that agent.

Ghostfile-Alerts.png
Ghostfile-Alerts.png (80.78 KiB) Viewed 4970 times

Alarms will show up as warnings and will tell you which file is noncompliant.



Enable the Automated Service

ghostfile-automatedservice.png
ghostfile-automatedservice.png (120.32 KiB) Viewed 4963 times

mwilhelmi
Posts: 37
Joined: Thu Nov 19, 2020 7:16 am
3

Re: Habitat Host File Manager

Post by mwilhelmi »

Is it possible to use the host file manager to monitor hostfiles, similar to local admin groups?
And in case of a change drop an alert.

User avatar
Cubert
Posts: 2430
Joined: Tue Dec 29, 2015 7:57 pm
8
Contact:

Re: Habitat Host File Manager

Post by Cubert »

It could be yes. We would need to give you a means to capture either the agents original file or a client approved file that does not get updated during any scans. Then we would need to test the contents against the original and alert when not consistent.


We would need to add a space to the database for this extra content. A script of automated server function to compare the data and an alert mechanism when bad matches happen.


I would need to play with it a little bit but we could do something.

User avatar
Cubert
Posts: 2430
Joined: Tue Dec 29, 2015 7:57 pm
8
Contact:

Re: Habitat Host File Manager

Post by Cubert »

Ok We will release soon Habitat 1.0.1.20 which will have a few updates to the GhostFile app.

We fixed a minor issue with loss of newlines when saving and we also added to Habitat GhostFile maintenance script the ability to manually schedule a file testing scan. You will need to use the built in script scheduler for Automate and select either a client or an agent to apply schedule to.


image1.png
image1.png (142.25 KiB) Viewed 4996 times

The TESTFILES command launches a script function that will read in all current files from agent and compare them to the files stored in database for the same agent. if a match then nothing happens, if the files do not match an LTserver Alert is launched for that agent.

User avatar
Cubert
Posts: 2430
Joined: Tue Dec 29, 2015 7:57 pm
8
Contact:

Re: Habitat Host File Manager

Post by Cubert »

We released 1.0.1.20,

Ran out of time this week to fully complete all the changes in mind but we did get the above in there, improved the file fetcher, Client default save function and now have an automated service available to test your agents for non compliant files.

We still need to tweek a few things and add some control to import client defaults in agent console and save to agent.

Buts that's 1.0.1.21


Re-read the top post for descriptions of changes and new screenshots.

User avatar
Cubert
Posts: 2430
Joined: Tue Dec 29, 2015 7:57 pm
8
Contact:

Re: Habitat Host File Manager

Post by Cubert »

Ok got back early and had a chance to add the final pieces it was missing.

The post above now represents the new Ghost File v2.

User avatar
Cubert
Posts: 2430
Joined: Tue Dec 29, 2015 7:57 pm
8
Contact:

Re: Habitat Host File Manager

Post by Cubert »

How's that for service? 24 hours turn around on a feature request!
mwilhelmi wrote: Thu Feb 24, 2022 1:24 pm Is it possible to use the host file manager to monitor hostfiles, similar to local admin groups?
And in case of a change drop an alert.

Post Reply

Return to “Habitat Documentation Forum”